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(54) Content-based forwarding/filtering in a network switching device 



(57) A method of processing frames received at a 
sending port of a switching device for communication to 
a destination port includes storing in the switching 
device an offset value, a comparator value, and an 
expectant value; comparing information located at a 
position in a frame determined by the offset value with 
the comparator value to obtain an outcome; and 
processing the frame with the outcome. Processing the 
frame may include communicating the frame to a desti- 
nation port or setting the priority of the frame. The offset 
and comparator values may be part of a filter that also 
includes an anchor value from which the offset value is 
measured and a mask value that masks the frame infor- 
mation before comparison with the comparator value. 
Where there are a multiple of filters in the switching 
device, the method may include combining the filter out- 
comes to obtain a filter group outcome; and processing 
the frame with the group outcome. Combining the filter 
outcomes may include logically combining their out- 
comes. The method may also include merging the out- 
come with frame forwarding information from another 
source; and processing the frame with the merged out- 
come. Apparatus in accordance with the invention prac- 
tices these methods. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
[0012] 

5 Fig. 1 is a block diagram of an exemplary computer network including a switching device. 

Fig. 2 is an exemplary look-up table in a switching device for determining a destination port. 

Fig. 3 is an block diagram of a pertinent portion of a packet switch in accordance with the invention. 

Rg. 4 is a block diagram of the content-based forwarding logic of Fig. 3. 

Fig. 5 is a block diagram of a filter of Fig. 4. 
io Figs. 6A and 6B are block diagrams of the merge logic of Fig. 3. 

Fig. 7 is a logic diagram illustrating the method for including or excluding a filter from a group. 

Fig. 8 illustrates the basic combination of filters in a group. 

Rg. 9 illustrates two variants on the basic combination of Rg. 8. 

15 DETAILED DESCRIPTION OF AN ILLUSTRATIVE EMBODIMENT 

Overview 

[0013] In the following description, a "policy" corresponds to a filter within a packet switch for filtering a frame. A 
20 "policy-expression" corresponds to the outcome of logically combining one or more filter outcomes in determining what 
action to take in response to reception of a frame. 

[0014] The information so derived is in turn based upon the result of the application of Policy-expressions on the 
frame. Policy-expression is defined as a Boolean expression involving various policy results as variables. Example pol- 
icies are "match", "do not match" etc. 

25 

Policy Representations 

[0015] Policy is represented as 

Policy : = { expectant, offset, length, anchor, mask, comparator } 

30 

"expectant" is in turn represented as 

expectant : = { match | no-match | greater-than | lesser-than } 

"offset" is a byte or word offset into the frame from the beginning of a predefined "anchor"-point within the frame. 
Typical anchor-points are: 

35 

1 ) Beginning of a frame 

2) Beginning of a Layer-2/Layer-3 or any other layer header 

3) End of a Layer-2/Layer-3 or any other layer header 

4) A fixed byte-offset from the beginning of the frame 

AO 

"length" is a value which is measure of the word length of the offset word being sought 

"mask" is a value which is AND/OR/NAND/NORed with the frame's content present at "its "offset" location as 
described above. Typically the mask is used to omit various unwanted bits present in the content bytes for the pur- 
poses of applying the policy. 

45 "comparator" is a value which is to be compared against the resultant content bytes after the application of "mask" 
in order to derive one of the "expectant" values. If the expectant value matches the comparison, then the policy suc- 
ceeds. 

Policy-expression 

so 

[0016] Policy-expression consists of two parts, namely, an expression and resultant-actions. 
Policy-expression : = { expression, actions } 

"expression" is a Boolean/combinatorial-logic expression using operators like INVERT, AND and OR and various 
55 "policies" as its variables. For example, any two or more policies can be combined using INVERT, AND, and OR to 
form a Boolean expression resulting in a TRUE or FALSE condition, as described below. 

[0017] When the expression's result is TRUE, resultant-actions are applied to the frame being handled. There are 
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various resultant-actions one can take. Examples are: raising or lowering the priority of the frame, forward it to a partic- 
Zr Z mX modify it wrth a signature and/or send an unaltered copy of the frame to another port. These results 
can be optionally merged with the resufts of a traditional lookup as well. 

5 A Detailed Example 

F00181 Assuming that one wants to do content-based routing based on the following information: 
K F?eT-port- X - if a frame has V in the lower-nibbte at byte-offset 7 or W present at offset 1 4 and 50 not 
present at offset 30. 
w [0020] For the following frame: 

00 01 01 6739 0348 5672 87 a7 e8 3e fc9b 1a dd 41 5048 5443 3D 5C 3A4D 4A 53 50 52 54 
P1 = { match, 7, frame-start, OxOF, 0x08 } 
P2 = { match, 15, frame-start, OxFF, 0x9b } 
P3 = t no-match, 30, frame-start, OxFF, 0x50 } 
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Policy expression is 



r0 021l { P1 £ ^l^el^pSTLee^ (offset 7 has a byte value of 0x48 and when a mask of OxOF is applied 
rt matches witToxo7p2 succeeds and P3 fails' Since P1 and P2 succeed, the above po.icy^xpresson succeeds and 
hpnnp the action of "filter" is taken on the frame. . 
JS "tough the above example uses oniy 3 polkdes, this scheme does not limit the number of po..cks or the 
<;cone of the combinatorial logic to any small number. 

SS O^Tmportant aspect of the above scheme is that this described scheme is entirely programmed into ASIC 
conten^dforwalg/fiftering is accomplished for every frame at wirespeed without any intervention from 
Tny micfo^sTdirectiy or indirect.' connected to the AS.C. Fo.lowing appendix gives finer detail of one such 
implementation. 

Structure, Function, and Operation 

roo241 A network allows two or more parties to communicate with each other. In their simplestform networks gen- 
Snclude SmiSton lines and switching devfces (e.g., routers, switches, switching routers ete.). The trans^ 
sfonCsSrryS 

teml^nneS teV.ee* transmit lines. In telephone networks, for example, a caller's .ine goes to a switoh- 
nTS where the actual connection is made to the calted party. In computer networks. devices such as routers 
Serm^sages on the network and forward the messages to their correct destinations. Computer networks can be 
iTallTalS. area network (LAN) consisting of a few compute., printers, and other dev.es. or it can cons,st of 
manv computers distributed over a vast geographical area (e.g.. the Internet). 

S An exemplary computer network 10 is shown in Rg. 1 . The network includes two local segments 1 2 and 14. 
and ~nnecTo^ to "'remote network 16. Nodes, labeled as A^. -present computers connected to the ^ = n^ 
TsXhing device 20 includes three ports 22-24 and ^es network traffi^ 

network 16 Network 16 may also include switching devices, such as switching dev.ce 21. which then connects other 
^nts^« to the network. Switching device 20 artows the nodes on one segment to wrth 
SeTonler segments and to other switching devices. The nodes communicate with each other through a protocol 
IThtV^TCP^ TsMB. etc.) which allows le nodes to transmit and receive network frames (a network frame 
^deltinafio'n add.ss. a source address, and adatafK*,). When ^J^^^Sl 
node it analyzes the destination address by searching a lookup table 26. shown in FIG. 2. Lookup ^e 26 inches 
t"S entries having a network address field and a port field. When the destination address ,s matched to a network 
SSSJiTES; Ub^swrtching devfce 20 determines which port To forward It* frame to * ^"^porf 
number conesponding to the matched network address. For example, if node A on segment 12 sends a message to 
I e H ~ segment 14 switching device 20 receives the message from node A and in response searches the entr.es 

field 30 for network address H indicates that the frame should be forwarded over port 2. 

pra] MchTng device can obtain the network addresses for the iookup table in drtferent ways, depending on 
Srticular implement of the switching device. For example, the swrtching device may-snoop network raff c so 
that when " rl™ is receded on a port, the switching device determines if the frame's source address is.n the table 
and rft is not TcJs an entry containing the source address and the inbound port to the table. Thus, the sw.tch.ng 
See s sS otin" addresses and port numbers from any frame that is transmrtted by a node. Another techn.gue 
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some switching devices (e.g., routers) use to obtain the lookup table is from other switching devices through a special 
protocol. Thus, routers supply network addresses to each other to supplement their lookup tables. 
[0027] Consequently, when a network frame is received in a switch, both the source and destination addresses 
must be searched in the lookup table-the source address for "learning" and the destination address for forwarding. To 
5 search the lookup table, a search engine (not shown) within the switch 20 sequentially accesses lookup table entries 
and compares the entries to the destination address in the network frame. After the search for the destination address 
is completed, a second search is performed for the source address. 

[0028] Fig. 3 shows a port of a switching device 50 and related logic. Pertinent to this invention are a memory 58, 
content-based forwarding logic 60, temporary packet storage 62, packet analysis and key extraction logic 64, a search 
w engine 68, merge logic 70, and forwarding decision logic 72. There are multiple ports (not shown) in switching device 
50. The number of ports and how they are structured within the switching device are implementation specific and not 
germane to the invention. 

[0029] The port connects switching device 50 to a network (not shown) through a network cable 74. The network 
cable can take a variety of forms (e.g., fiber optic, twisted-pair, coaxial, etc.) depending on the type of network. A variety 

15 of network standards and protocols may be used, such as TCP/IP, IPX/SPX, FDD I, ATM, ETHERNET, GIGABIT 
ETHERNET, FAST ETHERNET, Token Ring, SONET, 100-base TX, etc. Other network protocols, standards, and net- 
work cables now existing or later developed may be used with the invention. The network cable communicates frames 
to the port which in turn communicates them to packet storage 62, search engine 68, and forwarding logic 60. 
[0030] Temporary packet storage 62 holds the network frame temporarily while other components within the search 

20 engine determine where to forward the network frame to, as is further described below. In some circumstances, a deci- 
sion may be made to not forward the packet at all. In such cases, the network frame is never passed to the port inter- 
communication logic Depending on the size of the network frame, the temporary packet storage 62 may hold several 
network frames, or, alternatively, only a portion of a network frame as it is forwarded to another port. 
[0031] Packet analysis and key extraction logic 64 extracts the source and destination addresses from the network 

25 frame and forwards the addresses to the search engine 68. The packet analysis and key extraction logic 64 may also 
pass additional information to the search engine 68, such as virtual LAN information that comes with the network frame 
or is derived based on the type of network frame. This additional information is appended to the source and destination 
addresses to form a key. One skilled in the art will recognize that the key may include any desired information, depend- 
ing on the particular application. For example, the key may contain only the destination address, or only the source and 

30 destination addresses, or the source and destination addresses and additional information. For simplicity, the key is 
described generically below as being the source and destination addresses. 

[0032] Search engine 68 is coupled to memory 58. The memory stores a lookup table that the search engine uses 
for analyzing network frames received from media interface 56. A management processor (not shown) is coupled to 
search engine 68 and maintains the lookup table in memory 58. Specifically, the management processor may direct the 
35 search engines to delete old table entries, insert new table entries and generally maintain the table in sorted order so 
that the search engine 68 performs searches efficiently and correctly. 

[0033] After search engine 68 completes the search, the results are passed to forwarding decision logic 72, which 
examines the results and applies a predetermined set of rules to determine whether the network frame should be for- 
warded and which port or ports it should be forwarded ta Forwarding decision logic may also examine the level of pri- 
40 ority of the network frame. Higher priority frames are typically forwarded by the switching device 50 before lower priority 
frames. 

[0034] Incoming frames are also evaluated by content-based forwarding logic 60 in accordance with the invention. 
Based on that evaluation, the frame can be processed in a number of ways such as changing its priority, redirecting it 
to another port, etc. Unlike the search engine 68, forwarding logic 60 can look at the content of the frame other than the 
45 destination address. The results of the evaluation are then passed to merge logic 70. Logic 70 merges the results from 
forwarding logic 60 with the results from search engine 68 as commanded: merge (or not merge) in a number of ways, 
such as overwriting the priority determined by the search engine 68 with the priority determined by the forwarding logic 
70. 

[0035] Switch fabric control 78 controls network frames as they are passed through the switch fabric. In the case 
so where the switch fabric is a cross-bar switch, the switch fabric control is typically called a scheduler. The scheduler 
establishes a connection within the cross-bar switch so that a search engine on one port can directly pass a network 
frame to a search engine on another port. In the case where the switch fabric is a memory, the switch fabric control tells 
a receive-skJe search engine where to store the frame in memory. After the frame is stored in memory, the switch fabric 
control signals a transmitting-side port that the network frame is ready to be transmitted and provides the address of 
55 the memory location where the frame in located. The switch fabric control may also provide priority information to the 
transmitting-side port 

[0036] Fig. 4 is a block diagram of an embodiment of content-based forwarding logic 70. The logic includes a win- 
dow 80 or equivalent technique for viewing the contents of a frame as it streams by The window has marked thereon 
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several anchor points AO, A1, A2, etc., that are communicated to the logic by the packet analysis block 64. Filters 81 
(policies) within active groups monitor the window 80 to detect information located at a position in a frame determined 
by the filter offset value (frame word(s) of interest). In Fig. 4, for example, P1 captures the frame word(s) beginning at 
offset 1877 from anchor A2, P2 captures the frame word(s) beginning at offset 17 from anchor A1. P3 captures the 
5 frame word(s) beginning at offset 21 3 from anchor AO, and P4 captures the frame word(s) beginning at offset 53 from 
anchor AO. 

[0037] The filters then generate an outcome depending upon their settings, and pass these outcomes to an expres- 
sion 82. which combines them in a given way to produce a result. The results is an action to be taken to process the 
frame such as to change its priority or add to or change its destination. 

w [0038] Fig 5 is a block diagram of a filter 81 such as P1 in Fig. 4. Filter settings 90 represents the values the filter 
receives from registers and other source for its expectant, offset, anchor, mask, and comparator. The filter determines 
from the anchor and offset which word in the frame is of interest (SUM 92) and looks for this word in the frame. The 
retrieved word(s) are then ANDed with the mask value (AND 94)to provide data for comparison with the comparand 
(COMPARE 96). The outcome of the comparison forms the expectant, which is a logic one if there is a match and a 

is logic zero if there is not. If a no-match is desired, then the comparator output is inverted (INVERT 98), so that no-match 
generates a logic one. ... , 

[0039] Returning to Fig. 4 and Figs. 7-9, it can be seen how filters are selected for inclusion in various groups and 
how the expression 82 can be structures to take action based on filter outcomes. 

[0040] Figs. 6A and 6B show and describe a particular form of the merge logic for merging the outcome of the for- 

20 warding decision logic 70 with the search engine 68. 

[0041] In the illustrative embodiment, 64 offset/mask forwarding filters are implemented in an application-specific 
integrated circuit (ASIC) that form the content-base forwarding logic. Each filter guarantees the ability to match a 64-bit 
word placed on any bit boundary within a desired number of bytes such as the first 256 bytes of a frame, or within any 
L3 payload therein. Any bits of this word can be masked off so that only the remaining bits will determine the match 

25 result. To implement this, each filter has an offset count value for filter placement, a comparand word, a mask word, a 
length of the frame word to be evaluated, a port sensitivity enable bit, and a Protocol selector. 
[0042] An Offset Mask Filter works by indexing into either the raw (L2) frame or its L3 payload (if any) the number 
of words indicated by its offset count value. Once this start point is reached, the filter compares the length-defined 
words of the frame against its word comparand and mask values. If all of the unmasked bits match up then a filter match 

so occurs. (Additional qualifications based on input port number and/or Protocol are available.) 

[0043] The 64 single filters are further grouped into 16 sets of from 1 to 8 filters each. These 8 filters may be chosen 
from any of the 64, and a filter may be shared by more than one group. Each group of filters has a control field and a 
forwarding vector associated with it The control field has an enable bit for each of its filters. When a filter is disabled, 
its match result will be forced to failure. A separate per-filter invert bit allows the result from each filter to be passed 

35 through unchanged or inverted. A diagram of one of the eight inputs to a filter group is shown in Fig. 7. 

[0044] A group of eight logic control bits determine how the results of the filters are combined. The first bit deter- 
mines if filter 0 result (F0) will be ANDed or ORed with F1 . The second, third, and fourth bits likewise control the gating 
of F2 to F3 F4 to F5. and F6 to F7. The fifth, sixth, and seventh bits control the gating together of these four results. 
The eighth bit selects a grouping mode (described later). The basic logic control sequence is shown in the following 

40 equation. A +/* is OR/AND and the subscript indicates the controlling bit position : 

Group Result = ((F0 +r 0 F1) +/* 4 (F2 +r , F3)) +/* 6 ((F4 +/* 2 F5) +/* 5 (F6 +r 3 F7)) 

[0045] The basic filter operation map, active when the 8 th logic bit (bit 7) is 0. is shown in Fig. 8. 
45 [0046] Because this is somewhat inflexible (you can only AND a filter with up to 4 ORed filters, wasting up to three 
filters), there are two variant modes selected when the 8 th logic bit is, shown in Fig. 9. This allows for up to 6 (or 7) ORed 
terms ANDed with 2 (or 1 ) terms. 

[0047] When the group result logic yields a true condition a group match occurs. A group match is reported to the 
FAR module along with the group's forwarding vector. This forwarding vector contains the date necessary to forward a 

so frame including a port group number and its enable bit, VLAN ID and its enable bit, priority and its enable bit, sniff bits 
and an enable bit, and counter index and its enable bit. When the FAR module receives a group match notification, it 
will override its normal forwarding decision and data and replace it with enabled portions of the group's forwarding vec- 
tor When multiple group matches occur, the logic 60 arbitrates each data field separately based on a simple priority 
scheme where the lowest numbered group takes precedence for any enabled field. In any conflict, group 0 always wins 

55 and group 1 5 always loses. If a frame has been marked for discard by parts of the logic 60 other than the Broadcast 
Limit counters and not because its Pgroup was the discard Pgroup, then the OMF is unable to change this decision. To 
state this another way, an OMF match blocks the action of the Broadcast Limit counters and can redirect a frame from 
the discard Pgroup elsewhere, but otherwise discarded frames stay that way. 
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25 



[0048] The filters and groups are programmed through a common register set. A particular filter is selected by writ- 
ing its 6-bit index value into the. filter/group select register. Once the filter index value has been set, all of the registers 
for the selected filter are available for read/write operations, and the filter will not match any frame data. It must be unse- 
lected to begin filtering. 

[0049] A particular group is selected by writing its 4-bit index value into the filter/group select register. Once the 
group index value has been set, all of the registers for the selected group are available for read/write operations. 
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0x130 Filter/Group Select (V2 ASIC) - [R/W] This register selects one of the logic 60's 64 filters and one of its 16 
filter groups for modification. The selected filter and groups* registers are available via the shared offset mask reg- 
ister address space 0x1 31 - 0x1 3B. Also available here is a self-test facility for chip-level verification. 



15 



20 



31-29 



8-23 




2 

2 


21-16 


1 

5-4 


3-0 


F 


Filler 




Group 


ilter 


Select 




Select 


t 








nselcct 









3:0 Group Select: Selects one of the 16 Filter Groups for editing via the Group Control, Mux Select, and Forwarding 
Vector registers. 



30 21:16 Filter Select: Selects one of 64 filters for editing via the Offset Count & Control, Comparand 0-2 and Mask 0- 
2 registers. While a fitter is selected for editing "it will not function as a filter 

23 Rlter Unselect. Because a Filter cannot match while it is selected, a way to select no filter is needed. Setting this 
bit does so. 

35 

31 29 BIST: Built-in Self Test. Writing 3*b1 00 to this field triggers a 51 2«tock self-test cycle. Bit 29 will be set at the 
end of this cycle, and Bit 30 will be set if the test failed. 3*b000 must be written back after the test completes to 
resume normal operation. While testing, normal filter operation will be disrupted, and most OMF registers' contents 
will be destroyed. 

40 

0x131 Rlter Group Control (V2 ASIC) - [R/W] This register provides access to the currently selected (0x130) filter 
group's control register. 
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7:0 Rlter Enables: Single bit enables for each of the eight filters in a group. Bit 0 enables filter 0 t bit 1 filter 1 , and 
so on. When an enable bit is set, that filter's result will be based upon comparand and mask comparisons to frame 
data. When the enable bit is cleared, the filter result will be forced low to indicate a compare failure. 

15-8 Invert Enables: Inversion control bits for each of the eight filters in a group. Bit 8 inverts filter 0, bit 9 inverts 
filter 1 , etc. When an invert bit is set, that filter's result will be inverted before it is presented to the group match logic. 
When the invert bit is cleared, the filter result will be passed unchanged to the group match logic. 

231 6 Logic Control. These 8 logic control bits determine how the results of the eight filters within a group are gated 
together to determine the group's match result. Refer to the diagrams above for functionality, noting that Bit 1 6 is 0 
in the diagram, Bit 17 is 1 , etc. A low on a logic control bit selects the AND gating function while a high selects the 
OR gating function. Bit 23 is special, and selects alternate logic groupings, per the chart 

24 Counter Index Enable. Single bit enable for the CIDX field. When high, the CIDX value in the filter group's for- 
warding vector will cause the corresponding SA CIDX counter to be incremented for each frame matched by this 
group. When low, the SA CIDX counters will not be affected by such frames. In either case, when an OMF forward- 
ing vector is applied to a frame the DA CIDX counters are unaffected. 

25 L3 Edit Disable. This bit, when set, prevents Layer 3 frame editing (a necessary part of routing) from being done 
if the Offset Mask Filter group matches. Changes blocked are MAC SA replacement, IP TTL/Hop count changing, 
and IPX Hop count changing. When cleared, the Offset Mask Rlter group will function normally and Layer 3 frame 
editing will be allowed. 

26 Sniff Disable. This bit, when set, prevents the Offset Mask Filter group's forwarding vector from overriding the 
Sniff bits. When cleared, the Offset Mask Rlter group will function normally and will override this portion of the 
frame's forwarding vector. 

27 Pgroup Disable This bit, when set, prevents the Offset Mask Filter group's forwarding vector from overriding the 
Destination Port Group. When cleared, the Offset Mask Rlter group will function normally and will override this por- 
tion of the frame's forwarding vector. This override also sets the OMF bit and clears the Flood and CPU bits in the 
SPM header, and disables Broadcast Limiting, 

28 VLAN Disable This bit, when set, prevents the Offset Mask Filter group's forwarding vector from overriding the 
VLAN ID. When cleared, the Offset Mask Filter group will function normally and will override this portion of the 
frame's forwarding vector. 

29 Priority Disable. This bit, when set, prevents the Offset Mask Filter group's forwarding vector from overriding the 
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frame's priority. When cleared, the Offset Mask Fitter group will function normally and will override this portion of 
the frame's forwarding vector. 

30 Q. This bit, when set, sets the Q bit in the forwarding decision logic if the Offset Mask Filter group matches. This 
5 extracts and translates an IP frame's Precedence field into an internal priority, overriding "its original priority. For 

Layer 3 IP frames, if Q is set and Priority Disable (bit 29) is clear, the frame's priority will be translated and will 
replace the frame's IP Precedence field, provided that 1 ) the L3 Edit Disable bit is not set, and 2) this is not an IPv4 
frame with an invalid version or with header extensions. 

10 31 Reserved. 

0x132 Group Mux Select 0 (V2 ASIC) - [R/W] This register provides access to one half the currently selected 
(0x130) filter group's multiplexer select registers. (Warning: Due to the internal implementation necessary to cram 
16 groups into the chip, writing to this register also writes to Group Mux Select 1 . If you always write both registers 
is in the order 0, 1 , then this will not be a problem.) 
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5:0 FO Selector: Selects which of the 64 Filters is to be the group's F0. 

30 

1 1 16 F1 Selector: Selects which of the 64 Filters is to be the group's F1 . 
1 7:12 F2 Selector: Selects which of the 64 Filters is to be the group's F2. 
35 23:18 F3 Selector: Selects which of the 64 Filters is to be the group's F3. 
31 24 Reserved. 

0x133 Group Mux Select 1 (V2 ASIC) - [R/W] This register provides access to one half the currently selected 
40 (0x1 30) filter group's multiplexer select registers. 
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510 F4 Selector: Selects which of the 64 Filters is to be the group's F4. 

55 

1 1 :6 F5 Selector: Selects which of the 64 Filters is to be the group's F5: 
17:12 F6 Selector: Selects which of the 64 Filters is to be the group's F6. 
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23:18 F7 Selector: Selects which of the 64 Filters is to be the group's F7. 

31 -24 F0-F7 Results [Read Only]: For testing purposes, the single-bit Match status of the eight filters in tl 
is available here. FO is in bit 24. F1 in bit 25, etc. Status will be valid until the next frame is processed. 

0x134 Offset Mask Forwarding Vector (V2 ASIC) - [R/W] This register provides access to the currently 
(0x130) filter group's forwarding vector register. 
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4:0 Counter Index: 5-bit index indicating which SA index counter should be incremented if index counters are ena- 
bled for this group. 

5 S2: Single bit indicating the frame should be sent to Sniff Resource 2. 

6 S1 : Single bit indicating the frame should be sent to Sniff Resource 1 . 

16 7 Port Group: 10-bit forwarding port group used in the Receive Notification message. Note that if this field 
matches the Discard Port Group, the frame will be dropped unless S1 or S2 is set. 

2817 VLAN ID- 12-bit VLAN ID number to be used when forwarding the frame. This number is placed in the SPM 
Header for all frames. For tagged frames, this value also replaces the VLAN number in the frame s tag. 

31 29 Priority: 3-bit priority value used to forward the frame. This value is placed in the SPM Header and, for ragged 
frames, it also replaces the priority in the frame's tag. 

0x135 Offset Count & Control (V2 ASIC) - [R/W] This register provides access to the currenfiy se 'ected(x130) fil- 
ter's Offset Count. Protocol, and Port Sensitivity registers. The 6-bit offset count value is a 4 byte word offset from 
nefr^oe^ 
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5:0 Offset: 6-bit offset count value is a 4 byte word offset from either the front of the frame or the rent of the L3 
payload which establishes the start point for this fitter's compare logic. If the last word ^nta,nmg allor part :oi the 
FCS) or the 64* word of the frame is reached before all three comparand words are used. " 
Because the logte 60 does not necessarily hold onto a frame until it's completely rece.ved, it is unable to match 
beyond 256 bytes into a frame. 



15:6 Reserved. 
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16 Port Sensitivity: If this bit is set, The low-order 5 bits of both Comparand Word 2 and Mask Word 2 will be ignored 
for the purposes of filtering, and instead will be used as 10 port match bits. If the Port Match bit corresponding to 
the port the frame came in on is set, the Filter can match. If it is clear, the Filter cannot match. 

5 20:1 7 Protocol: This 4-bit value determines whether the Filter matches data from the beginning of the frame (Layer 

2) or from the beginning of the Layer 3 part of the frame. If Layer 3 is selected, the Frame's detected protocol must 
match this protocol value for the Filter to match: 
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Note that even though a type of encapsulation recognition might be disabled in the PID module (LLC or SNAP), Fil- 
ters will still be able to match 12 data following the encapsulation data. In these cases, however, the protocol would 
be Other. OMF is purposely disconnected from as much of the other logic 60 logic as possible, so that it may be 
used as a 'patch kit*. 

31:21 Reserved. 

0x136 Filter Comparand Word 0 (V2 ASIC) - [RAW] This register provides access to the currently selected (x130) 
filter's Comparand Word 0 register. (Warning: Due to the internal implementation necessary to cram 64 filters into 
the chip, writing to this register also writes to Comparand Word 1 and Comparand Word 2. If you always write all 
three registers in the order 0, 1 , 2, then this will not be a problem.) This word is compared against the frame word 
located at the Offset Count position. The result of this comparison will be qualified by the Mask Word 0. Any result- 
ant mismatch will result in a fail match status for this filter on this frame. 

31 



Comparand Word 0 1 



0x137 Rlter Comparand Word 1 (V2 ASJC) - [R/W] This register provides access to the currently selected (x130) 
filter's Comparand Word 1 register. (Warning: Due to the internal implementation necessary to cram 64 filters into 
the chip, writing to this register also writes to Comparand Word 2. !f you always write all three registers in the order 
0, 1 , 2, then this will not be a problem.) This word is compared against the frame word located a the (Offset Count 
+ 1 ) position. The result of this comparison will be qualified by the Mask Word 1. Any resultant mismatch will result 
in a fail status for this filter on this frame. 

31 



Comparand Word 1 



0x138 Rlter Comparand Word 2 (V2 ASIC) - [R/W] This register provides access to the currently selected (x130) 
filter's Comparand Word 2 register. This word is compared against the frame word located at the (Offset Count + 
2) position. The result of this comparison will be qualified by the Mask Word 1 . Any resultant mismatch will result in 
a fail status for this filter on this frame. Warning: If the Port Sensitivity bit is on, the low-order 5 bits (4-0) will be used 
instead to enable matches of ports 4 through 0. Bit 0 enables Port 0, bit 1 Port 1 , etc. For frame matching purposes, 
these 5 bits will be ignored. 

31 



Comparand Word 2 



0x139 Filter Mask Word 0 (V2 ASIC) - [R/W] This register provides access to the currently selected (x130) filter's 
Mask Word 0 register. (Warning: Due to the internal implementation necessary to cram 64 filters into the chip, writ- 
ing to this register also writes to Mask Word 1 and Mask Word 2. If you always write all three registers in the order 
0, 1 , 2, then this will not be a problem.) This word qualifies the results of the Comparand Word 0 comparison. Any 
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bit set in this word will mask the matching bit position and force a true comparison result on that bit. 

31 

Mask Word 0 



0x13A Filter Mask Word 1 (V2 ASIC) - [R/W] This register provides access to the currently selected (x130) filter's 
Mask Word 1 register. (Warning: Due to the internal implementation necessary to cram 64 filters into the chip, writ- 
ing to this register also writes to Mask Word 2. If you always write all three registers in the order 0, 1 , 2, then this 
will not be a problem.) This word qualifies the results of the Comparand Word 1 comparison. Any bit set in this word 
will mask the matching bit position and force a true comparison result on that bit. 

31 



Mask Word 1 



0x1 3B Rlter Mask Word 2 (V2 ASIC) - [R/W] This register provides access to the currently selected (x130) filter's 
Mask Word 2 register. This word qualifies the results of the Comparand Word 2 comparison. Any bit set in this word 
will mask the matching bit position and force a true comparison result on that bit. Warning: If the Port Sensitivity bit 
is on, the tow-order 5 bits (4-0) will be used instead to enable matches of ports 9 through 5. Bit 0 enables Port 5, 
bit 1 Port 6, etc. For masking purposes, these 5 bits will be treated as being set to 1 's. 

31 



Mask Word 2 



[0050] Having understood the principles of the invention from the embodiments of the invention shown and 
40 described herein, those of skill in the art will recognize that the embodiments can be modified in arrangement and detail 
without departing from such principles. The construction of the various modules can be varied while still providing the 
functions described. Elements of the various modules can be implemented in hardware, software, or firmware within 
the context of the invention. For example, the offset value, comparator value, expectant value, etc., can be stored in 
structure other than filters. The length of words, the number of filters, the number of groups, etc., are all application 
45 choices and not limitations of the invention. 

[0051] In view of the many possible embodiments to which the principles of the invention may be applied, it should 
be understood that these embodiments are illustrative only and should not be taken as a limitation on the scope of the 
invention. The invention, rather, is defined by the following claims. We therefore claim as the invention all embodiments 
that may come within the scope of these claims and their equivalents. 



50 



55 



Claims 

1 . In a switching device, a method of processing frames received at a sending port and communicated to a destination 
port, the method comprising: 

storing in the switching device a filter that includes an offset value and a comparator value; 

comparing information located at a position in a frame determined by the filter offset value with the comparator 

value to obtain a filter outcome; and 
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processing the frame with the fitter outcome. 

2. The method of claim 1 wherein processing the frame includes communicating the frame to destination ports using 
the outcome to determine which destination ports are to receive the frame. 

5 

3. The method of claim 1 wherein processing the frame includes setting the priority of the frame using the fitter out- 
come. 

4. The method of claim 1 wherein the storing step includes storing a filter that includes an expectant value used in the 
w comparing step. 

5. The method of claim 1 wherein the storing step includes storing a filter that includes an anchor value from which 
the offset value is measured. 

15 6. The method of claim 1 wherein the storing step includes storing a filter that includes a mask value that masks the 
frame information before comparison with the comparator value. 

7. The method of claim 1 wherein there are a multiple of filters in the switching device each performing the steps, the 
method including: 

20 

combining the filter outcomes to obtain a filter group outcome; and 
processing the frame with the filter group outcome. 

8. The method of claim 7 wherein combining the filter outcomes includes logically combining their outcomes. 

25 

9. The method of claim 1 including: 

merging the filter outcome with frame forwarding information from another source; and 
processing the frame with the merged outcome. 

30 

10. In a switching device, apparatus for processing frames received at a sending port and communicated to a destina- 
tion port, the method comprising: 

means for storing in the switching device a filter that includes an offset value and a comparator value; 
35 means for comparing information located at a position in a frame determined by the filter offset value with the 

comparator; and 

means for processing the frame with the filter outcome. 

1 1 . The apparatus of claim 1 0 including means for storing a filter that includes an expectant value used in the compar- 
40 ing step. 

12. The apparatus of claim 10 including means for storing a filter that includes an anchor value from which the offset 
value is measured. 

45 13. The method of claim 1 0 including means for storing a filter that includes a mask value that masks the frame infor- 
mation before comparison with the comparator value. 

14. The apparatus of claim 10 including: 

so means for merging the filter outcome with frame forwarding information from another source; and 

means for processing the frame with the merged outcome. 

15. The apparatus of claim 10 including: 

55 means for storing multiple filters in the switching device; 

means for combining the filter outcomes to obtain a filter group outcome; and 
means for processing the frame with the filter group outcome. 
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16. In a switching device, a method of processing frames received at a sending port and communicated to a destination 
port, the method comprising: 

storing in the switching device an offset value and a comparator value; 

comparing information located at a position in a frame determined by the offset value with the comparator value 
to obtain an outcome; and 
processing the frame with the outcome. 

17. The method of claim 16 wherein the offset value and comparator value are associated with a filter. 

1 8. The method of claim 1 6 wherein there are a multiple sets of offset values, comparator values and related outcomes, 
the method including : 

combining the outcomes to obtain a group outcome; and 
is processing the frame with the group outcome. 

19. The method of claim 18 wherein combining the outcomes includes logically combining the outcomes. 
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FIG. 3 
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FIG. 4 
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